POST
Issue an API key

Authorizations

Authorization
string
header
required

Staff access token. Sent as Authorization: Bearer <token>, or — when that header is absent — read from the accessToken cookie, which is how the admin app authenticates. Tokens carry a tokenVersion; logout and password reset bump it, revoking every outstanding token for that account.

Path Parameters

appId
string
required
Pattern: ^[a-f\d]{24}$

Body

application/json
name
string
required
Minimum string length: 1

Response

Key issued. Store apiSecret now; it is not retrievable later.

Standard success envelope. The endpoint payload is in data.

data
object
required
Example:
message
string
required
Example:

"Success"

meta
object
required
statusCode
integer
required
Example:

200

success
boolean
required
Example:

true